60
CVE-2019-10540
—CVSS 3.1
9.8 critical
EPSS
1%p65
Published
()
Modified
Description
Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS404, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130
- Vendors
- qualcomm
- Products
- ipq8074 firmware, msm8996au firmware, qca6174a firmware, qca6574au firmware, qca8081 firmware, qca9377 firmware, qca9379 firmware, qcs404 firmware, qcs405 firmware, qcs605 firmware, sd 636 firmware, sd 665 firmware
- Weakness
- CWE-120
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H